dom/bindings/crashtests/862092.html

branch
TOR_BUG_9701
changeset 15
b8a032363ba2
equal deleted inserted replaced
-1:000000000000 0:72c5f7192bc9
1 <!DOCTYPE html>
2 <html>
3 <head>
4 <meta charset="UTF-8">
5 <script>
6
7 function boom()
8 {
9 var frameDoc = document.getElementById("f").contentDocument;
10 frameDoc.adoptNode(document.createElement("select"));
11 }
12
13 </script>
14 </head>
15
16 <body onload="boom();">
17 <iframe id="f"></iframe>
18 </body>
19 </html>

mercurial